Migrate Threat Defense to Cloud-Delivered Firewall Management Center

Guides administrators through the complete process of migrating on-premises Management Center managed Firewall Threat Defense devices to Security Cloud Control, including prerequisites, supported features, and troubleshooting procedures.

Firewall Threat Defense migration to Security Cloud Control

Explains how to migrate Firewall Threat Defense devices from On-Premises Firewall Management Center to Security Cloud Control while preserving policies, configurations, and settings through Security Cloud Control Firewall Management.

End-to-end Firewall Threat Defense migration workflow

Describes the end-to-end migration workflow for Firewall Threat Defense, providing a high-level flowchart that illustrates the key steps and processes involved in the migration procedure.

Event and Analytics Management options during Firewall Threat Defense migration

Describes the options for managing where Firewall Threat Defense events and analytics are sent during migration, with choices between on-premises Firewall Management Center or Security Cloud Control as the analytics manager.

Supported features

Lists how Security Cloud Control imports shared policies and device configurations from On-Premises Firewall Management Center, including supported policy types and duplicate policy or object name handling.

Restriction: unsupported features in firewall threat defense migration

Outlines which Firewall Threat Defense migration features are unsupported in Security Cloud Control, including excluded configurations, analytics-only devices, EVE exception rules, rule recommendations, and custom network analysis policy requirements.

Recommendation: migration guidelines and limitations for VPN configuration

Outlines VPN migration guidelines for Firewall Threat Defense devices, including Remote Access VPN and Site-to-Site VPN settings, unsupported items, object overrides, certificates, local users, topology peers, and SASE tunnel limits.

Supported On-Premises Firewall Management Center and Firewall Threat Defense software versions for migration

Lists supported On-Premises Firewall Management Center and Firewall Threat Defense versions for migration, including high availability, cluster, multi-instance, interim upgrade, evaluation period, and post-migration requirements.

Prerequisites for migrating Firewall Threat Defense to Security Cloud Control

Outlines prerequisites for migrating Firewall Threat Defense devices to Security Cloud Control, including DNS, port access, on-premises Firewall Management Center onboarding, user permissions, backups, synchronization, VPN peers, object conflicts, FlexConfig objects, and HA failover health.

Migrate Firewall Threat Defense to Security Cloud Control

Configure migration of Firewall Threat Defense devices from On-Premises Firewall Management Center to Security Cloud Control, including device selection, VPN peer handling, commit actions, policy review, and deployment options.

Review and manage Firewall Threat Defense migration job

Configure review and management of Firewall Threat Defense migration job status in Security Cloud Control, including device progress monitoring, evaluation-period actions, report downloads, and deployment issue resolution.

Configure migration notifications

Provides information on enabling email notifications for Firewall Threat Defense migration events in Security Cloud Control.

Verify Firewall Threat Defense connectivity with Security Cloud Control

Provides commands to verify Firewall Threat Defense connectivity to Security Cloud Control by checking internet reachability, validating hostname resolution, and correcting DNS configuration from the device CLI.

Use the troubleshoot feature for failed migrations

Configure troubleshooting for failed or partially successful migration jobs using the inbuilt troubleshoot feature on the migration jobs page.